{"id":"https://openalex.org/W1555161758","doi":"https://doi.org/10.1109/ecrime.2015.7120801","title":"Which malware lures work best? Measurements from a large instant messaging worm","display_name":"Which malware lures work best? Measurements from a large instant messaging worm","publication_year":2015,"publication_date":"2015-05-01","ids":{"openalex":"https://openalex.org/W1555161758","doi":"https://doi.org/10.1109/ecrime.2015.7120801","mag":"1555161758"},"language":"en","primary_location":{"id":"doi:10.1109/ecrime.2015.7120801","is_oa":false,"landing_page_url":"https://doi.org/10.1109/ecrime.2015.7120801","pdf_url":null,"source":null,"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"2015 APWG Symposium on Electronic Crime Research (eCrime)","raw_type":"proceedings-article"},"type":"article","indexed_in":["crossref"],"open_access":{"is_oa":false,"oa_status":"closed","oa_url":null,"any_repository_has_fulltext":false},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5073243028","display_name":"Tyler Moore","orcid":"https://orcid.org/0000-0002-8771-8191"},"institutions":[{"id":"https://openalex.org/I178169726","display_name":"Southern Methodist University","ror":"https://ror.org/042tdr378","country_code":"US","type":"education","lineage":["https://openalex.org/I178169726"]}],"countries":["US"],"is_corresponding":true,"raw_author_name":"Tyler Moore","raw_affiliation_strings":["Southern Methodist University, Dallas, TX, USA","Southern Methodist University , Dallas , TX , USA"],"affiliations":[{"raw_affiliation_string":"Southern Methodist University, Dallas, TX, USA","institution_ids":["https://openalex.org/I178169726"]},{"raw_affiliation_string":"Southern Methodist University , Dallas , TX , USA","institution_ids":["https://openalex.org/I178169726"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5090866479","display_name":"Richard Clayton","orcid":"https://orcid.org/0000-0002-1673-918X"},"institutions":[{"id":"https://openalex.org/I241749","display_name":"University of Cambridge","ror":"https://ror.org/013meh722","country_code":"GB","type":"education","lineage":["https://openalex.org/I241749"]}],"countries":["GB"],"is_corresponding":false,"raw_author_name":"Richard Clayton","raw_affiliation_strings":["University of Cambridge, Cambridge, United Kingdom","University of Cambridge Cambridge  United Kingdom"],"affiliations":[{"raw_affiliation_string":"University of Cambridge, Cambridge, United Kingdom","institution_ids":["https://openalex.org/I241749"]},{"raw_affiliation_string":"University of Cambridge Cambridge  United Kingdom","institution_ids":["https://openalex.org/I241749"]}]}],"institutions":[],"countries_distinct_count":2,"institutions_distinct_count":2,"corresponding_author_ids":["https://openalex.org/A5073243028"],"corresponding_institution_ids":["https://openalex.org/I178169726"],"apc_list":null,"apc_paid":null,"fwci":0.7946,"has_fulltext":false,"cited_by_count":3,"citation_normalized_percentile":{"value":0.7963562,"is_in_top_1_percent":false,"is_in_top_10_percent":false},"cited_by_percentile_year":{"min":89,"max":94},"biblio":{"volume":null,"issue":null,"first_page":"110","last_page":"110"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T11644","display_name":"Spam and Phishing Detection","score":1.0,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T11644","display_name":"Spam and Phishing Detection","score":1.0,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11147","display_name":"Misinformation and Its Impacts","score":0.9966999888420105,"subfield":{"id":"https://openalex.org/subfields/3312","display_name":"Sociology and Political Science"},"field":{"id":"https://openalex.org/fields/33","display_name":"Social Sciences"},"domain":{"id":"https://openalex.org/domains/2","display_name":"Social Sciences"}},{"id":"https://openalex.org/T12519","display_name":"Cybercrime and Law Enforcement Studies","score":0.9901000261306763,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/phishing","display_name":"Phishing","score":0.8997747302055359},{"id":"https://openalex.org/keywords/malware","display_name":"Malware","score":0.8770285844802856},{"id":"https://openalex.org/keywords/instant-messaging","display_name":"Instant messaging","score":0.8482950329780579},{"id":"https://openalex.org/keywords/computer-science","display_name":"Computer science","score":0.72783362865448},{"id":"https://openalex.org/keywords/instant","display_name":"Instant","score":0.6587119102478027},{"id":"https://openalex.org/keywords/world-wide-web","display_name":"World Wide Web","score":0.49812793731689453},{"id":"https://openalex.org/keywords/internet-privacy","display_name":"Internet privacy","score":0.49169808626174927},{"id":"https://openalex.org/keywords/computer-security","display_name":"Computer security","score":0.4746454358100891},{"id":"https://openalex.org/keywords/social-media","display_name":"Social media","score":0.46372339129447937},{"id":"https://openalex.org/keywords/portuguese","display_name":"Portuguese","score":0.456603080034256},{"id":"https://openalex.org/keywords/the-internet","display_name":"The Internet","score":0.3335619568824768}],"concepts":[{"id":"https://openalex.org/C83860907","wikidata":"https://www.wikidata.org/wiki/Q135005","display_name":"Phishing","level":3,"score":0.8997747302055359},{"id":"https://openalex.org/C541664917","wikidata":"https://www.wikidata.org/wiki/Q14001","display_name":"Malware","level":2,"score":0.8770285844802856},{"id":"https://openalex.org/C2985487447","wikidata":"https://www.wikidata.org/wiki/Q58199","display_name":"Instant messaging","level":2,"score":0.8482950329780579},{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.72783362865448},{"id":"https://openalex.org/C2779432360","wikidata":"https://www.wikidata.org/wiki/Q16963779","display_name":"Instant","level":2,"score":0.6587119102478027},{"id":"https://openalex.org/C136764020","wikidata":"https://www.wikidata.org/wiki/Q466","display_name":"World Wide Web","level":1,"score":0.49812793731689453},{"id":"https://openalex.org/C108827166","wikidata":"https://www.wikidata.org/wiki/Q175975","display_name":"Internet privacy","level":1,"score":0.49169808626174927},{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.4746454358100891},{"id":"https://openalex.org/C518677369","wikidata":"https://www.wikidata.org/wiki/Q202833","display_name":"Social media","level":2,"score":0.46372339129447937},{"id":"https://openalex.org/C35219183","wikidata":"https://www.wikidata.org/wiki/Q5146","display_name":"Portuguese","level":2,"score":0.456603080034256},{"id":"https://openalex.org/C110875604","wikidata":"https://www.wikidata.org/wiki/Q75","display_name":"The Internet","level":2,"score":0.3335619568824768},{"id":"https://openalex.org/C121332964","wikidata":"https://www.wikidata.org/wiki/Q413","display_name":"Physics","level":0,"score":0.0},{"id":"https://openalex.org/C41895202","wikidata":"https://www.wikidata.org/wiki/Q8162","display_name":"Linguistics","level":1,"score":0.0},{"id":"https://openalex.org/C138885662","wikidata":"https://www.wikidata.org/wiki/Q5891","display_name":"Philosophy","level":0,"score":0.0},{"id":"https://openalex.org/C62520636","wikidata":"https://www.wikidata.org/wiki/Q944","display_name":"Quantum mechanics","level":1,"score":0.0}],"mesh":[],"locations_count":1,"locations":[{"id":"doi:10.1109/ecrime.2015.7120801","is_oa":false,"landing_page_url":"https://doi.org/10.1109/ecrime.2015.7120801","pdf_url":null,"source":null,"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"2015 APWG Symposium on Electronic Crime Research (eCrime)","raw_type":"proceedings-article"}],"best_oa_location":null,"sustainable_development_goals":[],"awards":[],"funders":[{"id":"https://openalex.org/F4320306110","display_name":"U.S. Department of Homeland Security","ror":"https://ror.org/00jyr0d86"},{"id":"https://openalex.org/F4320315885","display_name":"Australian Government","ror":"https://ror.org/0314h5y94"}],"has_content":{"pdf":false,"grobid_xml":false},"content_urls":null,"referenced_works_count":5,"referenced_works":["https://openalex.org/W113692204","https://openalex.org/W1956666414","https://openalex.org/W1984936212","https://openalex.org/W1997667498","https://openalex.org/W2157597875"],"related_works":["https://openalex.org/W2799193527","https://openalex.org/W4249679496","https://openalex.org/W27875163","https://openalex.org/W4238418407","https://openalex.org/W4232683884","https://openalex.org/W2361008199","https://openalex.org/W2018813611","https://openalex.org/W2367021266","https://openalex.org/W2165646497","https://openalex.org/W1977341556"],"abstract_inverted_index":{"Users":[0],"are":[1],"inveigled":[2],"into":[3],"visiting":[4],"a":[5,9,18,21,59],"malicious":[6,134],"website":[7],"in":[8,113,166,168],"phishing":[10],"or":[11],"malware-distribution":[12],"scam":[13],"through":[14],"the":[15,39,77,92,107,117,127,133,139,149],"use":[16],"of":[17,42,72,120,129],"`lure'":[19],"-":[20],"superficially":[22],"valid":[23],"reason":[24],"for":[25],"their":[26],"interest.":[27],"We":[28,46,105,136],"examine":[29],"real":[30],"world":[31],"data":[32],"from":[33,63],"some":[34],"`worms'":[35],"that":[36,48,70,97,122,138,159],"spread":[37],"over":[38,49,58],"social":[40],"graph":[41],"Instant":[43],"Messenger":[44],"users.":[45],"find":[47],"14":[50],"million":[51,101],"distinct":[52],"users":[53,73,102,130],"clicked":[54,75],"on":[55,76,132],"these":[56,124],"lures":[57,78],"two":[60],"year":[61],"period":[62,87],"Spring":[64],"2010.":[65],"Furthermore,":[66],"we":[67,95],"present":[68],"evidence":[69],"95%":[71],"who":[74],"became":[79],"infected":[80],"with":[81],"malware.":[82],"In":[83],"one":[84],"four":[85],"week":[86],"spanning":[88],"May-June":[89],"2010,":[90],"near":[91],"worm's":[93],"peak,":[94],"estimate":[96],"at":[98],"least":[99],"1.67":[100],"were":[103,145,163],"infected.":[104],"measure":[106],"extent":[108],"to":[109],"which":[110],"small":[111],"variations":[112],"lure":[114],"URLs":[115,125],"and":[116,158],"short":[118],"pieces":[119],"text":[121],"accompany":[123],"affects":[126],"likelihood":[128],"clicking":[131],"URL.":[135],"show":[137],"hostnames":[140],"containing":[141],"recognizable":[142],"brand":[143],"names":[144],"more":[146,164,171],"effective":[147,165],"than":[148,170],"terse":[150],"random":[151],"strings":[152],"employed":[153],"by":[154],"URL":[155],"shortening":[156],"systems;":[157],"brief":[160],"Portuguese":[161],"phrases":[162],"luring":[167],"Brazilians":[169],"generic":[172],"`language":[173],"independent'":[174],"text.":[175]},"counts_by_year":[{"year":2022,"cited_by_count":1},{"year":2019,"cited_by_count":1},{"year":2017,"cited_by_count":1}],"updated_date":"2025-11-06T03:46:38.306776","created_date":"2025-10-10T00:00:00"}
